Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/wxI0H0DafqMiHK6YIIGKHv_OsVM.roa
File: wxI0H0DafqMiHK6YIIGKHv_OsVM.roa (raw, json)
Hash identifier: e0Yn5H+EAIPWS2qIKs4ostVa/9jApemxsuLlhpP9GIw=
Subject key identifier: C3:12:34:1F:40:DA:7E:A3:22:1C:AE:98:20:81:8A:1E:FF:CE:B1:53
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 0193D02CBEDDD317863BFFC281CA83E6041E
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/wxI0H0DafqMiHK6YIIGKHv_OsVM.roa
Signing time: Mon 16 Dec 2024 15:53:33 +0000
ROA not before: Mon 16 Dec 2024 15:53:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39305
IP address blocks: 185.88.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:2c:be:dd:d3:17:86:3b:ff:c2:81:ca:83:e6:04:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Dec 16 15:53:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c312341f40da7ea3221cae9820818a1effceb153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:85:a3:a0:e5:c4:3f:a0:1d:1c:1b:35:30:
a1:d9:9e:04:1e:73:01:b5:5f:90:52:0f:a8:97:0b:
c9:06:06:10:f7:48:26:66:c9:53:ad:b2:f9:78:29:
2b:48:dd:7d:a3:19:98:0d:dd:e0:16:9a:7d:ec:d4:
4f:48:25:43:88:91:11:5d:96:8c:72:9e:34:d0:ee:
7e:8e:28:0d:3c:06:d9:20:76:5d:6d:d2:3f:6f:8b:
95:20:0c:31:41:f4:80:01:e1:95:17:cc:c4:59:1c:
3c:68:73:2f:9e:f8:ac:9a:41:d0:60:88:31:9f:75:
4d:90:32:a5:06:32:1e:74:e2:94:3a:34:13:0a:08:
75:66:2c:e1:56:f1:b7:63:ba:6a:73:7f:ad:0a:d8:
bf:cc:16:9e:5e:ae:b7:3f:b3:1f:a6:04:5e:d9:52:
82:f4:a8:83:b9:1d:08:b3:4b:88:19:83:9f:4a:fe:
d6:87:46:b6:52:8b:77:af:ab:04:1b:cd:11:35:43:
ab:ce:55:3e:80:96:10:b8:67:d3:27:c2:83:92:9f:
5b:a8:df:9a:0f:53:54:8c:42:90:e8:0d:0d:c2:03:
2c:cc:db:49:c9:47:33:d7:1a:eb:04:17:b7:84:3c:
cf:f8:7c:31:d7:78:54:7f:97:73:6f:98:27:2d:9c:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:12:34:1F:40:DA:7E:A3:22:1C:AE:98:20:81:8A:1E:FF:CE:B1:53
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/wxI0H0DafqMiHK6YIIGKHv_OsVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.9.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cf:ee:22:a4:05:8d:5b:ce:16:fe:dc:ba:3e:a6:ef:e4:0c:
c7:8e:cb:8a:4b:02:4d:77:c3:91:33:d5:0a:fc:20:ee:6a:02:
22:1b:16:63:72:95:6c:68:7b:26:fe:20:cb:c6:db:33:fa:fb:
b7:b3:1c:03:84:62:55:70:2e:84:56:d8:ef:57:fe:6d:fd:d7:
41:2d:4a:e3:61:28:4e:2c:64:30:46:01:c6:74:3c:82:81:48:
9a:c5:87:b6:e2:98:fd:9a:4d:16:a6:72:1a:e5:65:c5:08:05:
99:a2:2e:2b:f3:b7:95:00:89:02:1b:5c:e1:a9:ed:e1:37:ed:
95:28:10:49:cf:bf:bd:f0:1f:9d:ae:ba:1d:e5:59:99:3f:ae:
bc:b4:e9:b9:30:75:d9:bf:0f:e5:6f:d0:9c:1a:7b:56:49:ce:
1c:d8:bf:a1:e4:1c:8e:58:f9:64:fb:6d:37:96:7c:c2:d1:10:
9a:41:87:4a:53:47:ca:b1:a8:5c:f4:81:87:33:b4:55:48:25:
ee:cb:d6:1f:38:88:2b:03:16:eb:40:97:43:dd:9b:24:c0:3a:
af:dc:8d:89:f4:60:e4:56:a7:ff:91:e6:6c:63:db:d0:5a:a9:
bb:3a:e4:78:45:bc:cc:8d:42:06:02:5d:07:54:ea:92:2d:3f:
38:0e:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:41 2024 by rpki-client on console.sobornost.net